Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
File: XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json)
Hash identifier: kBtTwTeIV1zk2V+uIo/OEYu9eINFm8lJ0s+unowc0H8=
Subject key identifier: 20:4E:C9:E1:11:D9:B0:AF:0A:83:DC:E4:F7:3D:E9:21:18:63:3C:CA
Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Certificate serial: 019A01B5F688ACD6D9C25AB30AB5D1A35D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
Manifest number: 0635
Signing time: Mon 20 Oct 2025 13:01:33 +0000
Manifest this update: Mon 20 Oct 2025 13:01:33 +0000
Manifest next update: Tue 21 Oct 2025 13:01:33 +0000
Files and hashes: 1: NfD0bu6CTOHFOwKX83vXlWW-BFM.roa (hash: E6orvDZyM/U63REesg6yOGTM6Hs+Hh2EKGVP0jWzDOg=)
2: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: rhmli7FGfENXgY+PjCknQP5Swz0vdl+61avg0xZHtnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:f6:88:ac:d6:d9:c2:5a:b3:0a:b5:d1:a3:5d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Validity
Not Before: Oct 20 13:01:33 2025 GMT
Not After : Oct 21 13:01:33 2025 GMT
Subject: CN=204ec9e111d9b0af0a83dce4f73de92118633cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:d2:4f:ef:74:50:e4:20:b9:f5:2c:a4:4c:
c0:09:09:29:66:2c:1e:67:40:a0:fd:f0:54:57:00:
fa:ea:c0:d1:05:65:30:2a:64:00:22:50:02:dd:89:
4b:40:eb:17:e3:59:28:41:6b:f0:de:72:1d:d6:aa:
b9:64:a6:da:32:b4:23:46:80:ff:ae:ba:a3:4d:17:
f0:02:38:2b:00:24:3f:c0:1e:59:97:08:2d:da:ee:
0c:23:53:5b:9d:76:bb:18:af:a7:10:ae:cc:6b:b2:
38:06:89:d1:e8:d2:49:0e:d3:d5:7a:87:39:b8:80:
82:d0:04:70:96:aa:e3:75:22:48:c5:63:c7:f1:78:
e0:f1:c5:c5:c5:ec:2e:a4:f8:b8:a5:c6:ac:98:df:
af:41:41:0c:56:9b:f7:91:28:c3:44:3f:40:7a:64:
13:6a:cf:9e:68:ec:25:e0:08:9f:4e:ec:d8:38:15:
f6:fe:3e:28:67:2c:30:f2:aa:21:a5:50:17:b3:d8:
dc:09:e4:8e:0e:a0:18:7e:90:2e:da:94:6e:f2:28:
1c:58:c3:dc:d1:97:d2:69:6e:51:29:10:78:73:a5:
21:97:66:03:b2:14:dc:31:6d:90:0c:fd:04:d1:b1:
31:30:1e:d6:8a:0e:df:53:66:d9:65:d6:92:4c:ed:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4E:C9:E1:11:D9:B0:AF:0A:83:DC:E4:F7:3D:E9:21:18:63:3C:CA
X509v3 Authority Key Identifier:
keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a5:f0:82:17:1b:11:77:a1:88:4c:f3:7a:b3:6c:1d:75:e3:
ab:8c:81:79:db:43:b4:4d:55:4a:ab:54:2d:d3:8e:12:01:6a:
89:85:89:50:0c:22:0e:4f:04:ac:26:8e:98:25:4e:08:e5:24:
d5:44:82:33:bc:e6:35:84:79:57:84:6a:24:8f:4a:ba:48:d5:
a6:fd:69:fa:00:37:d2:81:f6:be:e9:7b:19:bb:7a:f3:09:55:
80:fa:da:dc:da:f4:30:54:3e:20:a6:3b:b7:06:9d:f2:f2:c9:
7c:16:d1:d3:ef:b5:79:1a:96:21:ca:42:87:fc:3d:db:88:6c:
04:ac:c1:6d:ca:d4:0a:5e:ec:d1:ab:ea:99:41:d9:5b:48:53:
e1:e5:5a:66:5c:99:c6:d9:46:3e:36:de:62:d8:7e:75:6c:e1:
2b:6f:b6:a1:7b:3e:d2:af:46:9b:fe:81:c7:72:98:60:66:e6:
05:d0:a4:a4:81:cf:09:d6:d8:76:9a:f8:de:b7:80:05:4f:8d:
ce:f6:4c:92:d9:92:8c:c8:44:59:47:ba:da:bb:60:e5:07:81:
fa:58:c0:e0:0b:85:a4:5e:0f:be:a2:70:f7:cf:d4:03:c1:04:
20:b0:39:08:cf:94:7f:90:eb:20:34:05:d6:c6:64:aa:6f:86:
b3:92:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:26:03 2025 by rpki-client